CVE-2018-1000646

Technical details about CVE-2018-1000646 are not publicly provided in the connected documents; monitor for updates.

CVE-2018-1000648

Summary: CVE-2018-1000648 affects LibreHealthIO lh-ehr REL-2.0.0. The vulnerability is an Authenticated Unrestricted File Write in the patient letter/file handling logic, where user-controlled parameters can cause files to be written with malicious content, potentially enabling remote code execut...

CVE-2018-1000649

LibreHealthIO LH-EHR REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in letter.php (2) within the Patient file letter functions. The issue allows writing files with malicious content via user-controlled input, potentially enabling remote code execution. This entry is cor...

CVE-2018-1000650

LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters...

CVE-2018-1000650

CVE-2018-1000650 affects LibreHealthIO lh-ehr REL-2.0.0. The connected documents describe a SQL Injection vulnerability in the Show Groups Popup SQL query functions that can allow a remote attacker to execute malicious database queries through parameters under user control. No remediation details...

CVE-2018-1000648

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled parameters...

CVE-2018-1000647

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter...

CVE-2018-1000647

The CVE-2018-1000647 entry concerns LibreHealthIO LH-EHR REL-2.0.0, where the Import template exposes an Authenticated Unrestricted File Deletion vulnerability that can cause Denial of Service. The vulnerability is exploitable via a user-controlled parameter, with CVSS metrics indicating Network ...

CVE-2018-1000645

LibreHealthIO lh-ehr version REL-2.0.0 contains an Authenticated Local File Disclosure vulnerability in Importing of templates allows local file disclosure that can result in Disclosure of sensitive files on the server. This attack appear to be exploitable via User controlled variable in import...

CVE-2018-1000649

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php 2 vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User...

CVE-2018-1000649

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php 2 vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User...

CVE-2018-1000650: Improper Neutralization of Special Elements used in an SQL Command

LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters...

PT-2018-9503

Name of the Vulnerable Software and Affected Versions LibreHealthIO lh-ehr version REL-2.0.0 Description The issue concerns a SQL Injection vulnerability in the Show Groups Popup SQL query functions. This can allow an attacker to perform malicious database queries. The attack is exploitable via...

PT-2018-9498

Name of the Vulnerable Software and Affected Versions LibreHealthIO lh-ehr versions prior to 2.0.0 Description The issue allows for local file disclosure, which can result in the disclosure of sensitive files on the server. This is exploitable via a user-controlled variable in the import template...

PT-2018-9500

Name of the Vulnerable Software and Affected Versions LibreHealthIO lh-ehr version REL-2.0.0 Description The issue concerns an authenticated unrestricted file deletion that can lead to a denial of service. This is exploitable via a user-controlled parameter in the Import template. Recommendations...

PT-2018-9502

Name of the Vulnerable Software and Affected Versions LibreHealthIO lh-ehr version REL-2.0.0 Description The issue concerns an authenticated unrestricted file write vulnerability in the letter.php file, specifically within patient file letter functions. This vulnerability can lead to writing file...

PT-2018-9499

Name of the Vulnerable Software and Affected Versions LibreHealthIO LH-EHR version REL-2.0.0 Description The issue concerns an Authenticated Unrestricted File Write vulnerability in the Import template, which can lead to writing files with malicious content and potentially result in remote code...

PT-2018-9501

Name of the Vulnerable Software and Affected Versions LibreHealthIO lh-ehr version REL-2.0.0 Description The issue concerns an authenticated unrestricted file write vulnerability in patient file letter functions. This can lead to writing files with malicious content, potentially resulting in remo...

CVE-2018-1000646: Unrestricted Upload of File with Dangerous Type

LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write files with malicious content and may lead to remote code execution...

CVE-2018-1000649: Incorrect Permission Assignment for Critical Resource

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php 2 vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User...